none
Windows server 2012 wsus 内网补丁服务器,客户端无法获取更新 RRS feed

  • 问题

  • 1.使用了Windows server 2012 r2 系统版本

    2.wsus版本是 6.3.9

    3.当前环境是 一台Windows server 2012 r2 做内网更新服务器(已经通过外网将wsus补丁同步),还有五台服务器系统都是Windows server r2 ,补丁服务器主要用于这五台服务器打补丁(都处于内网环境)

    4.在wsus客户端中可以发现客户端,当客户端通过系统管理员检查更新时为最新状态,但通过Windows 更新检查时会出现更新补丁

    在客户端更新记录中可以看到并无最近更新记录

    以下是客户端中收集到的错误信息日志

    以下是Windows server 2012 客户端中的Windows update log

    due to potential supersedence
    2017-12-14 21:23:19:281 704 690 Agent Update {8832EABB-68EE-4EF9-B45E-B8FEE94581B8}.202 is pruned out due to potential supersedence
    2017-12-14 21:23:19:281 704 690 Agent Update {ADF937CE-7B6D-49DE-A9EA-96F20413274A}.203 is pruned out due to potential supersedence
    2017-12-14 21:23:19:281 704 690 Agent  * Added update {89F1C905-9C84-4A67-9B90-17B5E30B0FCF}.201 to search result
    2017-12-14 21:23:19:281 704 690 Agent  * Added update {DA014F40-F4DC-4FCE-9CE5-4E79AB15279B}.200 to search result
    2017-12-14 21:23:19:281 704 690 Agent  * Found 162 updates and 17 categories in search; evaluated appl. rules of 1618 out of 2954 deployed entities
    2017-12-14 21:23:19:281 704 690 Agent *********
    2017-12-14 21:23:19:281 704 690 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 25]
    2017-12-14 21:23:19:281 704 690 Agent *************
    2017-12-14 21:23:19:281 704 690 IdleTmr WU operation (CSearchCall::Init ID 25, operation # 181) stopped; does use network; is not at background priority
    2017-12-14 21:23:19:281 704 6bc Report REPORT EVENT: {234D27A2-3843-4E37-A2CA-FB62EFD58377} 2017-12-14 21:23:19:281+0800 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdatesWuApp Success Software Synchronization Windows Update Client successfully detected 162 updates.

    2017-12-14 21:23:19:281 704 6bc Report CWERReporter finishing event handling. (00000000)
    2017-12-14 21:23:19:281 704 690 IdleTmr Decremented PDC RefCount for Network to 0
    2017-12-14 21:23:19:281 704 690 IdleTmr Decremented idle timer priority operation counter to 1
    2017-12-14 21:23:19:281 704 6dc AU >>##  RESUMED  ## AU: Search for updates [CallId = {2FEC44C5-60B0-4D53-BB4C-30EA32CD2039} ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}]
    2017-12-14 21:23:19:281 704 6dc AU  # 162 updates detected
    2017-12-14 21:23:19:295 704 6dc AU #########
    2017-12-14 21:23:19:295 704 6dc AU ##  END  ##  AU: Search for updates  [CallId = {2FEC44C5-60B0-4D53-BB4C-30EA32CD2039} ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}]
    2017-12-14 21:23:19:295 704 6dc AU #############
    2017-12-14 21:23:19:295 704 6dc AU All AU searches complete.
    2017-12-14 21:23:24:276 704 6bc Report CWERReporter finishing event handling. (00000000)
    2017-12-14 21:23:39:219 704 5b0 AU Triggering AU detection through DetectNow API
    2017-12-14 21:23:39:219 704 5b0 AU Triggering Online detection (interactive)
    2017-12-14 21:23:39:234 704 378 AU #############
    2017-12-14 21:23:39:234 704 378 AU ## START ##  AU: Search for updates
    2017-12-14 21:23:39:234 704 378 AU #########
    2017-12-14 21:23:39:234 704 378 SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
    2017-12-14 21:23:39:234 704 378 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=582&L=zh-CN&P=&PT=0x8&WUA=7.9.9600.17031
    2017-12-14 21:23:39:562 704 378 EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
    2017-12-14 21:23:39:562 704 378 SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
    2017-12-14 21:23:39:562 704 378 Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
    2017-12-14 21:23:39:562 704 378 Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
    2017-12-14 21:23:39:562 704 378 IdleTmr WU operation (CSearchCall::Init ID 26) started; operation # 1043; does use network; is not at background priority
    2017-12-14 21:23:39:562 704 378 IdleTmr Incremented PDC RefCount for Network to 1
    2017-12-14 21:23:39:562 704 378 IdleTmr Incremented idle timer priority operation counter to 2
    2017-12-14 21:23:39:577 704 378 Agent *** START ***  Queueing Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 26]
    2017-12-14 21:23:39:577 704 378 AU <<## SUBMITTED ## AU: Search for updates  [CallId = {9AED0592-9B90-42E5-9E9B-6584E9307772} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:23:39:577 704 690 Agent ***  END  ***  Queueing Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 26]
    2017-12-14 21:23:39:577 704 690 Agent *************
    2017-12-14 21:23:39:577 704 690 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 26]
    2017-12-14 21:23:39:577 704 690 Agent *********
    2017-12-14 21:23:39:577 704 690 Agent  * Online = Yes; Ignore download priority = No
    2017-12-14 21:23:39:577 704 690 Agent  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2017-12-14 21:23:39:577 704 690 Agent  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2017-12-14 21:23:39:577 704 690 Agent  * Search Scope = {Machine & All Users}
    2017-12-14 21:23:39:577 704 690 Agent  * Caller SID for Applicability: S-1-5-21-3774422676-448717430-1854228648-500
    2017-12-14 21:23:39:577 704 690 EP Got WSUS Client/Server URL: "http://wsus.hbj.com:8530/ClientWebService/client.asmx"
    2017-12-14 21:23:39:593 704 690 Setup Checking for agent SelfUpdate
    2017-12-14 21:23:39:593 704 690 Setup Client version: Core: 7.9.9600.17031  Aux: 7.9.9600.17031
    2017-12-14 21:23:39:593 704 690 EP Got WSUS SelfUpdate URL: "http://wsus.hbj.com:8530/selfupdate"
    2017-12-14 21:23:39:593 704 690 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2017-12-14 21:23:39:609 704 690 Misc Microsoft signed: NA
    2017-12-14 21:23:39:609 704 690 Misc Infrastructure signed: Yes
    2017-12-14 21:23:39:609 704 690 Misc WARNING: Cab does not contain correct inner CAB file.
    2017-12-14 21:23:39:609 704 690 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2017-12-14 21:23:39:609 704 690 Misc Microsoft signed: NA
    2017-12-14 21:23:39:609 704 690 Misc Infrastructure signed: Yes
    2017-12-14 21:23:39:609 704 690 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
    2017-12-14 21:23:39:609 704 690 Setup SelfUpdate check completed.  SelfUpdate is NOT required.
    2017-12-14 21:23:39:672 704 690 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2017-12-14 21:23:39:672 704 690 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus.hbj.com:8530/ClientWebService/client.asmx
    2017-12-14 21:23:40:046 704 690 PT  + SyncUpdates round trips: 2
    2017-12-14 21:23:41:483 704 690 Agent  * Found 0 updates and 75 categories in search; evaluated appl. rules of 603 out of 1158 deployed entities
    2017-12-14 21:23:41:483 704 690 Agent Reporting status event with 191 installable, 2 installed,  0 installed pending, 0 failed and 0 downloaded updates
    2017-12-14 21:23:41:483 704 690 Agent *********
    2017-12-14 21:23:41:483 704 690 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 26]
    2017-12-14 21:23:41:483 704 690 Agent *************
    2017-12-14 21:23:41:483 704 690 IdleTmr WU operation (CSearchCall::Init ID 26, operation # 1043) stopped; does use network; is not at background priority
    2017-12-14 21:23:41:483 704 690 IdleTmr Decremented PDC RefCount for Network to 0
    2017-12-14 21:23:41:483 704 690 IdleTmr Decremented idle timer priority operation counter to 1
    2017-12-14 21:23:41:483 704 6dc AU >>##  RESUMED  ## AU: Search for updates [CallId = {9AED0592-9B90-42E5-9E9B-6584E9307772} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:23:41:483 704 6dc AU  # 0 updates detected
    2017-12-14 21:23:41:483 704 6dc AU #########
    2017-12-14 21:23:41:483 704 6dc AU ##  END  ##  AU: Search for updates  [CallId = {9AED0592-9B90-42E5-9E9B-6584E9307772} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:23:41:483 704 6dc AU #############
    2017-12-14 21:23:41:483 704 6dc AU All AU searches complete.
    2017-12-14 21:23:41:483 704 6dc AU AU setting next detection timeout to 2017-12-15 10:36:40
    2017-12-14 21:23:41:497 704 6dc AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2017-12-14 21:23:41:497 704 6dc AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2017-12-14 21:23:46:494 704 6bc Report REPORT EVENT: {9337557A-1F16-4BD2-B342-380E27A8ADBF} 2017-12-14 21:23:41:483+0800 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdatesWuApp Success Software Synchronization Windows Update Client successfully detected 0 updates.
    2017-12-14 21:23:46:494 704 6bc Report REPORT EVENT: {CBADB36D-00B9-49AD-A6C3-D1F7F133C347} 2017-12-14 21:23:41:483+0800 1 156 [AGENT_STATUS_30] 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdatesWuApp Success Pre-Deployment Check Reporting client status.
    2017-12-14 21:23:46:494 704 6bc Report CWERReporter finishing event handling. (00000000)
    2017-12-14 21:24:16:862 704 378 AU AU received policy change subscription event
    2017-12-14 21:28:20:481 704 5b0 AU Triggering AU detection through DetectNow API
    2017-12-14 21:28:20:481 704 5b0 AU Triggering Online detection (non-interactive)
    2017-12-14 21:28:20:481 704 378 AU #############
    2017-12-14 21:28:20:481 704 378 AU ## START ##  AU: Search for updates
    2017-12-14 21:28:20:481 704 378 AU #########
    2017-12-14 21:28:20:481 704 378 SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
    2017-12-14 21:28:20:481 704 378 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=582&L=zh-CN&P=&PT=0x8&WUA=7.9.9600.17031
    2017-12-14 21:28:22:105 704 378 EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
    2017-12-14 21:28:22:105 704 378 SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
    2017-12-14 21:28:22:105 704 378 Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
    2017-12-14 21:28:22:105 704 378 Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
    2017-12-14 21:28:22:105 704 378 IdleTmr WU operation (CSearchCall::Init ID 27) started; operation # 1053; does use network; is not at background priority
    2017-12-14 21:28:22:105 704 378 IdleTmr Incremented PDC RefCount for Network to 1
    2017-12-14 21:28:22:105 704 378 IdleTmr Incremented idle timer priority operation counter to 2
    2017-12-14 21:28:22:105 704 378 Agent *** START ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 27]
    2017-12-14 21:28:22:105 704 378 AU <<## SUBMITTED ## AU: Search for updates  [CallId = {C32A4FD3-67CF-48BB-B15B-3B1B7D87C97C} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:28:22:105 704 690 Agent ***  END  ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 27]
    2017-12-14 21:28:22:105 704 690 Agent *************
    2017-12-14 21:28:22:105 704 690 Agent ** START **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 27]
    2017-12-14 21:28:22:105 704 690 Agent *********
    2017-12-14 21:28:22:105 704 690 Agent  * Online = Yes; Ignore download priority = No
    2017-12-14 21:28:22:105 704 690 Agent  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2017-12-14 21:28:22:105 704 690 Agent  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2017-12-14 21:28:22:105 704 690 Agent  * Search Scope = {Machine & All Users}
    2017-12-14 21:28:22:105 704 690 Agent  * Caller SID for Applicability: S-1-5-18
    2017-12-14 21:28:22:105 704 690 EP Got WSUS Client/Server URL: "http://wsus.hbj.com:8530/ClientWebService/client.asmx"
    2017-12-14 21:28:22:215 704 690 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2017-12-14 21:28:22:215 704 690 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus.hbj.com:8530/ClientWebService/client.asmx
    2017-12-14 21:28:24:245 704 690 PT  + SyncUpdates round trips: 4
    2017-12-14 21:28:26:245 704 690 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2017-12-14 21:28:26:245 704 690 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus.hbj.com:8530/ClientWebService/client.asmx
    2017-12-14 21:28:29:557 704 690 Agent  * Found 0 updates and 75 categories in search; evaluated appl. rules of 607 out of 1166 deployed entities
    2017-12-14 21:28:29:557 704 690 Agent Reporting status event with 194 installable, 2 installed,  0 installed pending, 0 failed and 0 downloaded updates
    2017-12-14 21:28:29:557 704 690 Agent *********
    2017-12-14 21:28:29:557 704 690 Agent **  END  **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 27]
    2017-12-14 21:28:29:557 704 690 Agent *************
    2017-12-14 21:28:29:557 704 690 IdleTmr WU operation (CSearchCall::Init ID 27, operation # 1053) stopped; does use network; is not at background priority
    2017-12-14 21:28:29:557 704 690 IdleTmr Decremented PDC RefCount for Network to 0
    2017-12-14 21:28:29:557 704 690 IdleTmr Decremented idle timer priority operation counter to 1
    2017-12-14 21:28:29:557 704 6dc AU >>##  RESUMED  ## AU: Search for updates [CallId = {C32A4FD3-67CF-48BB-B15B-3B1B7D87C97C} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:28:29:557 704 6dc AU  # 0 updates detected
    2017-12-14 21:28:29:557 704 6dc AU #########
    2017-12-14 21:28:29:557 704 6dc AU ##  END  ##  AU: Search for updates  [CallId = {C32A4FD3-67CF-48BB-B15B-3B1B7D87C97C} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2017-12-14 21:28:29:557 704 6dc AU #############
    2017-12-14 21:28:29:557 704 6dc AU All AU searches complete.
    2017-12-14 21:28:29:557 704 6dc AU AU setting next detection timeout to 2017-12-15 08:13:29
    2017-12-14 21:28:29:557 704 6dc AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2017-12-14 21:28:29:557 704 6dc AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037

    2017年12月14日 14:07

全部回复

  • 你好,

    1. 请问配完WSUS客户端后,这些客户端是否出现在WSUS server>计算机的分组里面?

    2. 如果这些客户端出现在WSUS server中,请问这些客户端有没有向WSUS server报告?如果有的话,报告的日期是最新的吗?

    3. 如果这些客户端最近向WSUS报告了,那么点击某个computer, 我们会看到这个computer是否有需要的update:

    4. 如何这个计算机有需要的update, 那你是否将这些update审批给这个computer所在的组去安装?

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2017年12月15日 8:52
    版主
  • 1.问题一

    需要更新的客户端已经出现在分组里边,有向wsus进行报告,而且更新进度可以到百分之60-90之间,但是不能到百分之百,

    在wsus客户端查看需要更新的客户端下方的需要更新的补丁,会出现需要更新的补丁数量,有的需要去手动审批,我手动审批之后更新进度无改变,通过客户端再次检查更新还是已经是最新补丁,没有发现刚才手动审批的补丁包,但是在通过Windows 检查更新时会出现需要更新的补丁包(测试方法,我在补丁服务器也加入了wsus客户端,将客户端联网检查更新),但是在客户端点击检查更新是会提示--已经是最新更新,无更新补丁。

    2.问题二

    请问在wsus客户端的更新进度无法到百分之百时因为个别补丁没有审批造成的吗?怎么可以使补丁更新到百分之百

    2017年12月15日 17:05
  • 你好,

    根据你提供的信息,可以看出WSUS server已经审批客户端所需的update, 然而客户端却没有检测到所需的更新:

    1. 建议你在客户端运行Windows Update troubleshooter;

    2. 先手动安装一下Windows server 2012R2所需的最新的月度更新,安装完之后看看客户端是否可以正常从WSUS server处检测到其他所需的更新;

    3. 如果上述还是不行的话,请重置一下客户端的windows update组件,重置组件的时候请参考以下链接:

    https://support.microsoft.com/en-sg/help/971058/how-do-i-reset-windows-update-components

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2017年12月19日 2:33
    版主
  • 我也出现同样问题

    1.客户端出现在WSUS server>计算机的分组里面

    2.客户端有向WSUS server报告,报告的日期是最新的

    3.点击某个computer, 我们会看到这个computer没有需要的update,更新状态为100%

    4.确定补丁都有手动审批过。

    5.win7,win10 os没有问题,我的问题出现是winsrv 2008及2012 os上。

    2018年3月23日 3:43